Hmm. It looks like files with the .lnk or .pif file extension can only be downloaded on a user gesture: https://chromium.googlesource.com/chromium/src/+/39841e5

Hmm. It looks like files with the .lnk or .pif file extension can only be downloaded on a user gesture: https://chromium.googlesource.com/chromium/src/+/39841e54180e2583dffa16fbbb9b99fd293821d0/chrome/browser/download/download_extensions.cc#:~:text=%7B%22-,lnk,-%22%2C%20ALLOW_ON_USER_GESTURE https://chromium.googlesource.com/chromium/src/+/39841e54180... So it can't be done silently. Although, I do wish the type was marked "DANGEROUS" a la dll files.